Chapter 4: Adding Active Directory Controllers and Users
o
Domain Users
o
Distributed COM Users
o
Event Log Readers
l
As an alternative, you can use these instructions to give the account the
relevant privileges.
l
The UDT account must be able to access certain WMI namespaces.
Setting WMI Namespace Security:
You configure access to WMI namespaces through these steps on the target AD
domain controller.
1. Open Administrative Tools (
Control Panel > Administrative Tools
)
2. Double-click
Computer Management
.
3. Expand the Services and Applications and double-click WMI Control.
4. Right-click
WMI Control
, and then select
Properties
.
5. On the Security tab, expand the tree under Root.
6. Select CIMv2 and then click
Security
.
7. Click
Advanced
.
8. Click
Add
9. Enter the account name in the text box and then click
OK
.
10. Confirm that Apply to is set to This namespace and subnamespaces.
11. Select the Allow check boxes for Execute Methods, Enable Account, and
Remote Enable.
12. Click
OK
.
13. Select directory and then click
Security
.
14. Repeat steps 7-12.
Note:
The Custom Security Descriptor (CustomSD) in Windows 2003 Server may
obstruct retrieval of user data even though the connection is open.
53
